Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FqaWZu3poFfXUFXKd8NNieMsAXtHi2hqEtSyK4rRPYct/0/323830343a353162343a653230303a3a2f34302d3430203d3e20323638343731.roa
File:                     323830343a353162343a653230303a3a2f34302d3430203d3e20323638343731.roa (raw, json)
Hash identifier:          XMOKw1lF5/sJbeHe5H5h/rHVaVVxROMv2fERuaZ3uaM=
Subject key identifier:   5F:A2:BE:0F:F7:29:3C:8B:01:A8:B8:84:93:24:33:AD:6B:CD:3C:54
Certificate issuer:       /CN=3AA25D1A66959674425740B0D69389FFFDDE91CB
Certificate serial:       0811C7CBBD0FDEAD64744E9F1ED76D81A360D47D
Authority key identifier: 3A:A2:5D:1A:66:95:96:74:42:57:40:B0:D6:93:89:FF:FD:DE:91:CB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3AA25D1A66959674425740B0D69389FFFDDE91CB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FqaWZu3poFfXUFXKd8NNieMsAXtHi2hqEtSyK4rRPYct/0/323830343a353162343a653230303a3a2f34302d3430203d3e20323638343731.roa
Signing time:             Fri 30 Dec 2022 19:33:06 +0000
ROA not before:           Fri 30 Dec 2022 19:28:06 +0000
ROA not after:            Fri 29 Dec 2023 19:33:06 +0000
asID:                     268471
IP address blocks:        2804:51b4:e200::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:11:c7:cb:bd:0f:de:ad:64:74:4e:9f:1e:d7:6d:81:a3:60:d4:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3AA25D1A66959674425740B0D69389FFFDDE91CB
        Validity
            Not Before: Dec 30 19:28:06 2022 GMT
            Not After : Dec 29 19:33:06 2023 GMT
        Subject: CN=5FA2BE0FF7293C8B01A8B884932433AD6BCD3C54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:67:02:32:56:73:1b:cc:43:5e:15:df:c0:08:
                    26:39:a3:26:81:19:40:99:57:38:57:df:9b:57:58:
                    fc:77:14:47:0c:70:6a:b9:ef:29:75:e1:f3:db:3a:
                    01:28:fb:e7:6a:6f:1e:98:c0:41:45:64:65:40:ca:
                    30:ae:90:e7:97:1b:6a:b0:97:bd:fc:7c:36:e3:09:
                    d0:58:09:52:33:1e:67:15:ba:ef:ff:53:32:61:d5:
                    13:e8:e1:5f:12:e0:ca:87:99:b8:bf:23:9c:91:e2:
                    d0:5c:2a:dd:b6:3f:b4:ef:14:48:01:33:1d:ee:88:
                    af:24:7e:b1:e1:37:9e:ee:09:ba:70:f9:f5:49:31:
                    54:db:59:59:cc:2d:64:d8:0e:9d:d7:4b:0b:fb:3c:
                    68:d0:e0:fd:30:dc:0e:1f:7a:18:40:0c:66:f4:eb:
                    b6:32:01:6b:38:fc:0c:45:28:0e:cf:9f:b2:4c:ee:
                    43:3e:ff:f9:94:ae:0b:b1:7d:55:b1:c1:39:77:cc:
                    d4:c5:be:29:72:8f:c2:94:8c:64:9a:e4:de:39:09:
                    b3:40:66:b1:e8:bd:aa:eb:c2:a7:64:14:01:eb:20:
                    c9:56:88:23:b4:4c:9a:f6:e1:fe:cf:c5:6f:8c:f4:
                    bc:d2:d3:cc:da:54:ab:e2:0d:6c:d0:dc:89:76:5b:
                    e4:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:A2:BE:0F:F7:29:3C:8B:01:A8:B8:84:93:24:33:AD:6B:CD:3C:54
            X509v3 Authority Key Identifier:
                keyid:3A:A2:5D:1A:66:95:96:74:42:57:40:B0:D6:93:89:FF:FD:DE:91:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FqaWZu3poFfXUFXKd8NNieMsAXtHi2hqEtSyK4rRPYct/0/3AA25D1A66959674425740B0D69389FFFDDE91CB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3AA25D1A66959674425740B0D69389FFFDDE91CB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FqaWZu3poFfXUFXKd8NNieMsAXtHi2hqEtSyK4rRPYct/0/323830343a353162343a653230303a3a2f34302d3430203d3e20323638343731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:51b4:e200::/40

    Signature Algorithm: sha256WithRSAEncryption
         4a:d9:2f:48:f5:1a:1b:67:91:ce:bf:f2:cd:88:08:e4:60:0f:
         ee:a5:0d:21:2d:33:96:2d:86:d4:60:ba:20:63:c0:9a:2e:9d:
         cf:4e:07:2e:72:6c:6f:ce:4c:ec:ed:8d:51:17:96:24:eb:ee:
         4e:93:cd:2b:ea:9e:d7:05:67:27:d7:aa:65:e5:79:84:6b:86:
         ce:99:e3:72:9b:57:07:ec:53:54:7f:5f:6b:37:54:1a:60:db:
         e3:5c:1c:7a:9a:f0:5e:de:68:b9:6e:79:70:4e:85:cc:75:67:
         44:0c:d8:1d:4e:d2:1d:1d:6d:42:88:a7:ae:b3:bb:7a:9f:e9:
         df:3a:83:0c:64:aa:fd:db:0f:81:1c:2d:0a:0f:23:4a:23:d1:
         b2:6e:32:2e:96:a0:89:c3:d9:c5:c4:a7:d5:55:cb:da:5b:66:
         f9:f1:be:c6:6a:4e:62:7d:a3:1b:d7:4a:0f:c5:e5:97:83:45:
         ce:1a:19:8f:26:7e:c6:91:25:5d:1d:77:fb:06:e3:c6:10:24:
         2a:2f:ed:ae:16:cd:80:75:ac:57:54:32:e1:97:16:92:3b:3b:
         b5:66:6f:4c:ca:20:a4:19:8d:05:46:5f:1d:39:cd:2a:da:d0:
         08:45:ae:e0:97:bb:fa:8e:d1:98:ca:5c:c6:2d:e7:0a:1d:79:
         ea:7a:56:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:08 2024 by rpki-client on console-ams.rpki-client.org